Deal with package.json issues (#579)

* Automatically stamp versions at npm install time, to be ready for concurrency.

* Peg package-lock.json to the fake version as well.